OpenForum RSS: NAT ��

�� (virtuoz)

Wed, 15 Oct 2008 13:15:19 GMT

�� . �� :) � �� promiscious ��, �� -�� :)

http://trash.evermore.ru/f/3632_4b0.jpg

�� (virtuoz)

Wed, 15 Oct 2008 11:55:53 GMT

>[�� ]
>>>iptables -t nat -A POSTROUTING -s 172.16.13.2/32 -d 192.168.13.2/32 -j SNAT --to-source
>>>192.168.13.1
>>>
>>>�� ...
>>
>>�� :(
>>
>>http://trash.evermore.ru/f/3625_e1f.jpg
>
>� iptables -t nat -A POSTROUTING �� ?

��. � �� ?

�� (reader)

Wed, 15 Oct 2008 10:57:09 GMT

>[�� ]
>>iptables -t nat -A POSTROUTING -s 192.168.13.2/32 -d 172.16.13.2/32 -j SNAT --to-source
>>172.16.13.1
>>iptables -t nat -A POSTROUTING -s 172.16.13.2/32 -d 192.168.13.2/32 -j SNAT --to-source
>>192.168.13.1
>>
>>�� ...
>
>�� :(
>
>http://trash.evermore.ru/f/3625_e1f.jpg

� iptables -t nat -A POSTROUTING �� ?

�� (virtuoz)

Wed, 15 Oct 2008 09:04:40 GMT

>[�� ]
>��
>
>iptables -A FORWARD -s 192.168.13.2/32 -d 172.16.13.2/32 -j ACCEPT
>iptables -A FORWARD -s 172.16.13.2/32 -d 192.168.13.2/32 -j ACCEPT
>iptables -t nat -A POSTROUTING -s 192.168.13.2/32 -d 172.16.13.2/32 -j SNAT --to-source
>172.16.13.1
>iptables -t nat -A POSTROUTING -s 172.16.13.2/32 -d 192.168.13.2/32 -j SNAT --to-source
>192.168.13.1
>
>�� ...

�� :(

http://trash.evermore.ru/f/3625_e1f.jpg

�� (virtuoz)

Wed, 15 Oct 2008 08:47:55 GMT

>[�� ]
>>
>>�� , �� , �� NAT ��
>>��.
>>
>>��
>>�� . �� :
>>
>>http://trash.evermore.ru/f/3625_e1f.jpg
>
>�� ?

�� . �� eth1 - 172.16.13.2

�� (reader)

Wed, 15 Oct 2008 08:16:36 GMT

>[�� ]
>>� ��
>>http://www.opennet.ru/docs/RUS/iptables/
>
>�� , �� , �� NAT ��
>��.
>
>��
>�� . �� :
>
>http://trash.evermore.ru/f/3625_e1f.jpg

�� ?

�� (virtuoz)

Wed, 15 Oct 2008 07:58:25 GMT

>iptables -A FORWARD -s 172.16.13.2 -j ACCEPT
>iptables -A FORWARD -s 192.168.13.2 -j ACCEPT
>
>�� , �� , �� SNAT
>�� , � ��
>iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to-source 192.168.13.1
>iptables -t nat -A POSTROUTING -o eth1 -j SNAT --to-source 172.16.13.1
>
>� ��
>http://www.opennet.ru/docs/RUS/iptables/

�� , �� , �� NAT �� .

�� . �� :

http://trash.evermore.ru/f/3625_e1f.jpg

�� (Temik)

Wed, 15 Oct 2008 07:48:21 GMT

>[�� ]
>��?
>
>��:
>ip_forward=1
>
>�� iptables ��. �� filter ��
>
>iptables -P INPUT DROP
>iptables -P FORWARD DROP
>iptables -P OUTPUT DROP

��

iptables -A FORWARD -s 192.168.13.2/32 -d 172.16.13.2/32 -j ACCEPT
iptables -A FORWARD -s 172.16.13.2/32 -d 192.168.13.2/32 -j ACCEPT
iptables -t nat -A POSTROUTING -s 192.168.13.2/32 -d 172.16.13.2/32 -j SNAT --to-source 172.16.13.1
iptables -t nat -A POSTROUTING -s 172.16.13.2/32 -d 192.168.13.2/32 -j SNAT --to-source 192.168.13.1

�� ...

�� (reader)

Wed, 15 Oct 2008 07:11:28 GMT

>�� :
>
>�� - 172.16.13.2

�� 172.16.13.1
>�� eth 1 �� - 172.16.13.1
>�� eth 0 �� - 192.168.13.1
>�� - 192.168.13.2

�� 192.168.13.1
>
>��:
>
>�� SNAT �� , ��
>� � �� NAT � �� . ��
>��?
>

��
>��:
>ip_forward=1
>
>�� iptables ��. �� filter ��
>
>iptables -P INPUT DROP
>iptables -P FORWARD DROP
>iptables -P OUTPUT DROP

iptables -A FORWARD -s 172.16.13.2 -j ACCEPT
iptables -A FORWARD -s 192.168.13.2 -j ACCEPT

�� , �� , �� SNAT �� , � ��
iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to-source 192.168.13.1
iptables -t nat -A POSTROUTING -o eth1 -j SNAT --to-source 172.16.13.1

� ��
http://www.openn

OpenForum RSS: NAT �� �������

��� �� ��� (virtuoz)

��� �� ��� (virtuoz)

��� �� ��� (reader)

��� �� ��� (virtuoz)

��� �� ��� (virtuoz)

��� �� ��� (reader)

��� �� ��� (virtuoz)

��� �� ��� (Temik)

��� �� ��� (reader)

OpenForum RSS: NAT ��

�� (virtuoz)

�� (virtuoz)

�� (reader)

�� (virtuoz)

�� (virtuoz)

�� (reader)

�� (virtuoz)

�� (Temik)

�� (reader)